Office 365 Reports in the admin center - Email activity

The Office 365 Reports dashboard shows you the activity overview across the products in your organization. It enables you to drill in to individual product level reports to give you more granular insight about the activities within each product. Check out the Reports overview topic.

For example, you can get a high level view of email traffic within your organization from the Reports page, and then you can drill into the Email activity widget to understand the trends and per user level details of the email activity within your organization.


You must be a global administrator in Office 365 or an Exchange, SharePoint, Skype for Business administrator, or Reports reader to see reports.

How to get to the email activity report

  1. In the admin center, go to the Reports > Usage page.

  2. Select the Email activity widget on the Reports dashboard or choose from the Select a report drop-down.

Interpret the email activity report

You can get a view into your user's email activity by looking at the Activity and Users charts.

Email activity report

The Email activity report can be viewed for trends over the last 7 days, 30 days, 90 days, or 180 days. However, if you select a particular day in the report, the table (7) will show data for up to 28 days from the current date (not the date the report was generated).
The data in each report usually covers up to the last 24 to 48 hours.
The Activity chart enables you to understand the trend of the amount of email activity going on in your organization. You can understand the split of email send or read or received activities.
The User chart enables you to understand the trend of the amount of unique users who are generating the email activities. You can look at the trend of users performing send, reading or receiving email activities.
On the Activity chart, the Y axis is the count of activity of the type email sent, email received and email read.
On the Users activity chart, the Y axis is the user's performing activity of the type email sent, email received and email read.
The X axis on both charts is the selected date range for this specific report.
You can filter the series you see on the chart by selecting an item in the legend. For example, on the Activity chart, select Sent, Received, or Read Filter charts for specific related data to see only the info related to each one. Changing this selection doesn't change the info in the grid table.
The table shows you a breakdown of the email activities at the per-user level. This shows all users that have an Exchange product assigned to them and their email activities.

Username is the email address of the user.
Display name is the full name if the user.
Deleted refers to the user whose current state is deleted, but was active during some part of the reporting period of the report.
Deleted date is the date the user was deleted.
Last activity date refers to the last time the user performed a read or send email activity.
Send actions is the number of times an email send action was recorded for the user.
Receive actions is the number of times an email received action was recorded for the user.
Read actions is the number of times an email read action was recorded for the user.
Product assigned is the products that are assigned to this user.
If your organization's policies prevents you from viewing reports where user information is identifiable, you can change the privacy setting for all these reports. Check out the How do I hide user level details? section in the Activity Reports in the Microsoft 365 admin center.
You can also export the report data into an Excel .csv file, by selecting the Export Export button link. This exports data of all users and enables you to do simple sorting and filtering for further analysis. If you have less than 2000 users, you can sort and filter within the table in the report itself. If you have more than 2000 users, in order to filter and sort, you will need to export the data.

Note: The Email activity report is only available for mailboxes that are associated with users who have licenses.